Microsoft outage hits Australia on a busy Friday

Australian workers started Friday 13 November without Outlook, Teams or Copilot as a Microsoft 365 failure that began on Thursday afternoon US time rolled straight into the local working day. The disruption reached well beyond inboxes, impacting regional NSW council service centres, Sydney customer service systems, and Western Meat Exporters in Queensland, which had to resort to phoning suppliers and customers. In Longreach, the School of the Air cancelled online lessons for students on sheep and cattle stations, while Adelaide business owner Bronte Hough reported being unable to process orders, print invoices or make deliveries.

Critical services largely held up. The Australian Energy Market Operator reported no disruption to its energy systems and markets, and the Bureau of Meteorology confirmed its forecasts, warnings, and the AusAlert national warning system were unaffected. The ABC found no direct impact on frontline police, court operations or Sydney Airport.

Ali Yavari, an associate professor at Swinburne University of Technology, warned that the bigger concern was staff improvising. Out of frustration or urgency, employees may turn to personal email accounts, unmanaged devices or unapproved messaging and file-sharing services to keep working. Once sensitive information moves outside security controls, the result can be unauthorised disclosure and confidentiality breaches.

Microsoft outage risks data leaks as Australian staff improvise workarounds.

Recovery has been uneven. Microsoft brought some servers back using an alternative health check method, but those servers stopped responding once handling traffic. Reports of Outlook problems on Downdetector peaked at 138,058 with disruptions running for more than five hours. Scammers also moved quickly, with ING warning customers of fraudsters offering to fix Microsoft problems.

Why it matters

Microsoft first reported that it was starting to fix systems, but now it looks like the recovery is failing as warnings emerge of immediate security risks. The incident highlights the vulnerability of heavy reliance on shared infrastructure.